How are co-payments made?

Co-payments can be made from net or gross salary.

As an admin, can I restrict upgrades?

Yes, you can.